Using Mullvad app on iOS

MULLVAD APP

Last updated: 3 January 2023


This guide explains how to install and use the Mullvad VPN app on iOS devices (iPhone/iPad).

What this guide covers

Installation requirements

The Mullvad app works on iOS 12 and newer iOS versions. If you have an earlier version then see our guide for using OpenVPN with iOS 9 to iOS 12.

iOS has a vulnerability that prevents any VPN from encrypting all traffic. Until Apple fixes this problem, use this solution to mitigate the issue.
If you have a problem with the Mullvad connection then check the Troubleshooting section.

Download and install

  1. On your iOS device, open the App Store.
  2. Search for Mullvad VPN.
  3. Tap GET to download the app.
  4. Once the app has finished downloading and installing, tap OPEN to launch it.

Can’t find Mullvad VPN in the App Store? Try the link to the App Store on our Download page. Note that some country restrictions prevent the app from being available in all countries.

Quick-start user’s guide

Log in

Enter your Mullvad account number, then tap on the green button with an arrow, or tap on the blue Return key on the keyboard. See the FAQ below if you get an error.

If you have logged in before then the last account number that you used will be displayed. If you want to remove this, click on the delete icon on the right side of the number.

If you log in with the wrong account number, then tap on the settings icon (gear) in the top right corner and tap on Account > Log out.

If you don’t have an account, tap Create account and one will be generated.

Too many devices (version 2022.3 and newer)

You can use a Mullvad VPN account on up to 5 devices. If you log in with an account that already has 5 devices associated with it, then you will be notified about this and you will see a list with all the device names.

The device names are randomly generated when you log in, using two words (an adjective and an animal). If it is the first time you see this and it shows more devices than you have then don't worry, just follow these instructions:

  1. To be able to log in you will need to remove at least one of the devices, by tapping the X to the right of the device name. To make sure you don't delete a device that you are using, open the Account settings in the Mullvad app on each device to see it's device name (if you do not see it then make sure you have updated the app). If you are using WireGuard outside of the Mullvad app then see instructions below.
  2. Tap "Yes, log out device".
  3. Tap on "Continue with login" to log in on the device.
  4. To see the new device name, tap on the settings icon and go to Account.

Using WireGuard

Each device is also associated with a WireGuard key. This is important to know if you are using WireGuard outside of the Mullvad app. To find the key follow this:

  • If you are using WireGuard on a router then use the "wg" command with SSH to show the key.
  • If you use the WireGuard app then find the key in the app (Windows/macOS) or use the "wg" command (Linux).

You can find out what device name the key has by logging in with your account number on the Mullvad website. It will show the device name and its WireGuard key below that.

Note that the Mullvad app will not show the WireGuard key in the app anymore, since you can see the device name in the Account settings instead.

Add time to your account

You won’t be able to connect unless you have purchased time for your account. You can do this in two different ways:

  • Log in on our website using your account number and purchase time for your account. There are many different payment methods available.
  • Make an in-app purchase: Tap the gear icon in the top right corner of the app and then tap Account. Then tap the green Add 30 days time button and then tap Subscribe. Note that in-app purchases are non-recurring one-time payments.

Make sure to write down your Mullvad account number for safe keeping.

Connect

You will see the status of your connection on the app's connection screen. If you are disconnected, the top bar of the app will be red and "Unsecure connection" will be displayed on the connection screen.

To connect to Mullvad for the first time follow these steps.

  1. Tap Secure connection.
  2. The app will ask for your permission to add VPN configurations to your device.
  3. Tap Allow.
  4. Enter your passcode or use your Touch/Face ID to add the VPN configurations.
  5. Once you are connected, the top bar of the app will be green, “Secure connection” will be displayed on the connection screen, and a VPN icon will show in the top when you open Control Center.

    By default, the app will initially connect to a server in Sweden. If you choose a different location, the app will remember your latest selection for the next time you start the app.
  6. You can also verify your connection with our Connection check.

Switch location

If you use an iPad then select your location in the right sidebar. If you use an iPhone then tap the Select location button. Then scroll and tap the country that you prefer and the app will reconnect automatically.

Tapping the drop-down icon (∨) to the right of a location will reveal cities and specific servers that you can choose to connect to.

Mullvad App settings

Settings

The Settings menu can be accessed by tapping the gear icon in the top right corner on the connection screen.

Note that the Mullvad app will not show the WireGuard key in the app anymore from version 2022.3, since you can see the device name in the Account settings instead.

Account

Here you can view your account number and when your paid time runs out. Tap the account number to copy it to your device’s clipboard.

In version 2022.3 and newer you can see the device name here as well.

You can tap on Add 30 days time to add time for your account via an in-app purchase. If you tap on Restore purchases nothing will happen as Apple does not have your Mullvad account number. If you have logged in with the wrong account number you can tap Log out. Make sure that you write down the current account number first if it has time on it.

Preferences

Here you find options that affects which DNS the app is using.

Block ads, Block trackers, Block Malware

If you enable this then Mullvad will use our filtered DNS server to prevent some ads, trackers and malware from loading in your web browser and other apps. In case you have a problem to load a website you can try to disable this. The filter lists we use are published at our GitHub.

In version 2022.3 and newer you can also block adult content and gambling here.

Use custom DNS

This setting allows you to use another DNS server than ours. You can only use an external DNS server, not one in your local network or your router. To use this feature follow these instructions.

  1. Turn off all the "Block" options.
  2. Tap on Edit in the top right corner.
  3. Tap on Add a server.
  4. Enter the IP address to an external DNS server.
  5. Tap on Done in the top right corner.
  6. Enable the Use custom DNS option.

WireGuard key

This has been removed in version 2022.3 and newer.

Here you can view, regenerate and verify your WireGuard® key.

Tapping Regenerate key will also replace your internal static IP address on the Mullvad server. The key is rotated automatically every four days.

Report a problem

If you are having any issues you can let us know by sending a problem report with the app's anonymized log. Enter your email address if you want a reply. Describe your problem in English or Swedish. You can also tap on View app logs to see the log yourself.

Uninstall the app

  1. On the home screen, tap and hold the Mullvad VPN icon until a menu pops up.
  2. Tap Remove App.
  3. Tap Delete App to remove the app from your device. This will also remove the local log files, cache, and settings.

FAQ

Troubleshooting

Q: The app says "Login failed. Too many public WireGuard keys" (before version 2022.3)

Disconnect from Mullvad and log in on our website and remove one or more WireGuard keys on the page Manage ports and WireGuard keys.

Q: The app connects but the Internet does not work. Or it does not connect. (before version 2022.3)

First disconnect from Mullvad and log in on our website and remove one or more WireGuard keys on the page Manage ports and WireGuard keys.

Then go the app settings > WireGuard key > Regenerate key and then Verify key. If it does not help then try it both on Wi-Fi and your mobile data connection.

Q: I purchased more time for my Mullvad account but the app still says that the account is "Out of time".

You can update the time by logging out of the app (remember to write down your account number first) and then log in again.

Q: Internet stops working but it works again when I reconnect Mullvad.

This can happen if your Internet connection alters between two Wi-Fi networks or between Wi-Fi and the mobile connection. Try to disable/forget other Wi-Fi networks and turn off mobile data on the phone.

Q: The app drains the battery.

The battery usage percentage is relative to how much you are using other apps on the device. If you don't use any other apps then Mullvad will get a high percentage.
If you have a bad Internet connection signal so the Internet reconnects a lot then Mullvad will use more battery since it will keep trying to transfer data and a lot of packets will have to be resent many times.

Feature requests

Q: Does the app have a kill switch?

The Mullvad app uses the "on-demand VPN" function in iOS which acts as a kill switch when the VPN is connected. It should not leak traffic (with some exceptions) as our VPN always appears as being "up". It is not using "includeAllNetworks".

Q: I want the app to connect or disconnect Mullvad automatically on some Wi-Fi networks.

This feature is not planned to be added as it can be a security and privacy risk as someone can set up a network with same name and then your device would connect to it or disconnect automatically.

Q: I want a home screen widget or Siri shortcut.

This is planned for a future app version.

Q: I want split tunneling in the app.

It is currently not possible to do this on iOS/iPadOS.

 

"WireGuard" is a registered trademark of Jason A. Donenfeld.